tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
...
*	Install fallback drop policies to avoid transmitting unencrypted packets.	Tobias Brunner	2011-07-27	1	-0/+17
\| \| \| \| \| \| \|	During the update of a CHILD_SA (e.g. caused by MOBIKE) the old policy is first uninstalled and then the new one is installed. In the short time in between, where no policy is available in the kernel, unencrypted packets could have been transmitted.
*	Remove policies in kernel interfaces based on their priority.	Tobias Brunner	2011-07-27	2	-21/+30
\| \| \| \| \| \|	This allows to unroute a connection while the same connection is currently established. In this case both CHILD_SAs share the same reqid but the installed policies have different priorities.
*	Inherit authentication information during IKE_SA rekeying	Martin Willi	2011-07-25	1	-0/+16
\|
*	fixed some more misspellings	Andreas Steffen	2011-07-20	1	-3/+3
\|
*	Fixed common misspellings.	Tobias Brunner	2011-07-20	6	-18/+18
\| \| \| \|	Mostly found by 'codespell'.
*	shunt manager installs policies with %any hosts	Andreas Steffen	2011-07-14	1	-3/+6
\|
*	Adapted shunt manager to changed kernel interface (reqid in del_policy).	Tobias Brunner	2011-07-06	1	-3/+6
\|
*	Replaced more complex iterator usages.	Tobias Brunner	2011-07-06	1	-25/+14
\|
*	Replaced ike_sa_t.create_additional_address_iterator with enumerator.	Tobias Brunner	2011-07-06	3	-31/+33
\|
*	Replaced ike_sa_t.create_child_sa_iterator with enumerator.	Tobias Brunner	2011-07-06	6	-72/+97
\| \| \| \| \|	This required two new methods on ike_sa_t. One returns the number of CHILD_SAs and one allows to remove a CHILD_SA.
*	Replaced simple iterator usages.	Tobias Brunner	2011-07-06	8	-161/+162
\|
*	Add the reqid to kernel_ipsec_t.del_policy.	Tobias Brunner	2011-07-06	1	-6/+12
\|
*	implemented PASS and DROP shunt policies	Andreas Steffen	2011-06-28	2	-0/+311
\|
*	Initialize trap_manager listener with INIT macro, too	Martin Willi	2011-06-28	1	-8/+9
\|
*	Migrated trap_manager_t to INIT/METHOD macros	Andreas Steffen	2011-06-28	1	-45/+32
\|
*	Check if colliding task has actually a CHILD, i.e. after a migrate	Martin Willi	2011-06-03	1	-1/+4
\|
*	logging initial EAP Identifier in EAP Identity Request	Andreas Steffen	2011-05-29	1	-3/+5
\|
*	Added strongswan.conf option to override half open IKE_SA timeout	Martin Willi	2011-05-16	1	-1/+2
\|
*	Added a get_count() method to IKE_SA manager	Martin Willi	2011-05-16	2	-3/+27
\|
*	Fixed identiation in private_ike_sa_manager	Martin Willi	2011-05-16	1	-57/+57
\|
*	Added a non-blocking, skipping variant of IKE_SA enumerator	Martin Willi	2011-05-16	2	-6/+24
\|
*	Typo fixed.	Tobias Brunner	2011-04-28	1	-1/+1
\|
*	Resolve and connect to RADIUS servers not before required	Martin Willi	2011-04-21	1	-0/+1
\|
*	Remove superfluous test for peer_cfg on established IKE_SAs	Martin Willi	2011-04-20	1	-1/+1
\|
*	Install ESN SAs if such a proposal has been negotiated	Martin Willi	2011-04-20	1	-1/+4
\|
*	Added an esn parameter to the kernel interface add_sa functions	Martin Willi	2011-04-20	1	-1/+1
\|
*	Clearly mark switch cases that fall through.	Tobias Brunner	2011-04-19	1	-0/+1
\|
*	Neither rekey nor del can be NULL.	Tobias Brunner	2011-04-14	1	-2/+2
\|
*	display EAP identifiers in HEX format	Andreas Steffen	2011-04-06	1	-4/+4
\|
*	log the EAP identifier also for vendor specific EAP methods	Andreas Steffen	2011-04-05	1	-2/+2
\|
*	log the initial value of the EAP identifier	Andreas Steffen	2011-04-05	1	-5/+6
\|
*	added get_identifier() and set_identifier() methods	Andreas Steffen	2011-04-05	1	-3/+18
\|
*	Move establish/inherit of rekeyed IKE_SAs to delete messages	Martin Willi	2011-03-15	5	-58/+54
\| \| \| \| \| \| \| \|	Having the inherit() function delayed to the IKE_SA establish procedure was problematic. The task destroy function was never a good place and results in locking/cleanup problems. After establishing the SA, it should be really checked in ASAP to avoid any triggered DPD checks to get lost.
*	Wrap IKE delete after rekey into rekey task for responder, too	Martin Willi	2011-03-15	1	-1/+18
\|
*	Migrated ike_rekey task to INIT/METHOD macros	Martin Willi	2011-03-15	1	-59/+40
\|
*	Migrated sim_manager to INIT/METHOD macros	Martin Willi	2011-03-08	1	-150/+92
\|
*	Protect sim card/provider/hook (un-)registration with a rwlock	Martin Willi	2011-03-08	1	-0/+58
\|
*	Splitted sim_manager.h header to sim_{card,provider,hooks}.h	Martin Willi	2011-03-08	4	-226/+305
\|
*	Slightly change IKE_SA destruction order to inherit properly during ↵	Martin Willi	2011-02-28	2	-3/+3
\| \| \| \|	ike_rekey task destruction
*	Report correct key size if a cipher is not supported	Martin Willi	2011-02-07	1	-1/+1
\|
*	Some typos fixed.	Tobias Brunner	2011-02-07	1	-1/+1
\|
*	Invoke the per-round authorize() hook before purging current auth info on IKE_SA	Martin Willi	2011-02-03	1	-10/+10
\|
*	Migrated ike_auth to INIT/METHOD macros, fixes missing initial_contact ↵	Martin Willi	2011-02-02	1	-56/+34
\| \| \| \|	initialization
*	Do not use destroyed rng/hasher if IKE_SA has been flush()ed	Martin Willi	2011-02-01	1	-3/+9
\|
*	Do not log potentially hundreds of cert requests for unknown CAs at level 1	Martin Willi	2011-01-28	1	-1/+8
\|
*	Revert "Send INITIAL_CONTACT even if we have a unique policy"	Martin Willi	2011-01-13	1	-1/+2
\| \| \| \| \| \| \| \|	It makes sense to omit INITIAL_CONTACT if don't have a unique policy, as a client might want to connect from different devices to the same account. This reverts commit 719c33b41a1f9fe9b2585df3e7aa804a760c361c.
*	Force port update as responder when initiator switches to 4500 in IKE_AUTH	Martin Willi	2011-01-12	3	-5/+6
\|
*	Avoid variable name overloading	Martin Willi	2011-01-12	1	-7/+11
\|
*	Send INITIAL_CONTACT even if we have a unique policy	Martin Willi	2011-01-10	1	-2/+1
\|
*	Fix nonce comparison in rekey collisions, lowest nonce loses	Martin Willi	2011-01-07	2	-7/+7
\|